{"id":"https://openalex.org/W4412546521","doi":"https://doi.org/10.3389/fcomp.2025.1647179","title":"A framework for cyber threat modeling and risk assessment in smart city environments","display_name":"A framework for cyber threat modeling and risk assessment in smart city environments","publication_year":2025,"publication_date":"2025-07-22","ids":{"openalex":"https://openalex.org/W4412546521","doi":"https://doi.org/10.3389/fcomp.2025.1647179"},"language":"en","primary_location":{"id":"doi:10.3389/fcomp.2025.1647179","is_oa":true,"landing_page_url":"https://doi.org/10.3389/fcomp.2025.1647179","pdf_url":"https://www.frontiersin.org/journals/computer-science/articles/10.3389/fcomp.2025.1647179/pdf","source":{"id":"https://openalex.org/S4210211086","display_name":"Frontiers in Computer Science","issn_l":"2624-9898","issn":["2624-9898"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310320527","host_organization_name":"Frontiers Media","host_organization_lineage":["https://openalex.org/P4310320527"],"host_organization_lineage_names":["Frontiers Media"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Frontiers in Computer Science","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://www.frontiersin.org/journals/computer-science/articles/10.3389/fcomp.2025.1647179/pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5057261701","display_name":"Mariya Ouaissa","orcid":"https://orcid.org/0000-0002-0088-3742"},"institutions":[{"id":"https://openalex.org/I119856527","display_name":"Cadi Ayyad University","ror":"https://ror.org/04xf6nm78","country_code":"MA","type":"education","lineage":["https://openalex.org/I119856527"]},{"id":"https://openalex.org/I4210125507","display_name":"Chouaib Doukkali University","ror":"https://ror.org/036kgyt43","country_code":"MA","type":"education","lineage":["https://openalex.org/I4210125507"]}],"countries":["MA"],"is_corresponding":true,"raw_author_name":"Mariya Ouaissa","raw_affiliation_strings":["LISI, Cadi Ayyad University, Marrakech, Morocco","LTI, Chouaib Doukkali University, El Jadida, Morocco"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"LISI, Cadi Ayyad University, Marrakech, Morocco","institution_ids":["https://openalex.org/I119856527"]},{"raw_affiliation_string":"LTI, Chouaib Doukkali University, El Jadida, Morocco","institution_ids":["https://openalex.org/I4210125507"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5057261701","display_name":"Mariya Ouaissa","orcid":"https://orcid.org/0000-0002-0088-3742"},"institutions":[{"id":"https://openalex.org/I119856527","display_name":"Cadi Ayyad University","ror":"https://ror.org/04xf6nm78","country_code":"MA","type":"education","lineage":["https://openalex.org/I119856527"]},{"id":"https://openalex.org/I4210125507","display_name":"Chouaib Doukkali University","ror":"https://ror.org/036kgyt43","country_code":"MA","type":"education","lineage":["https://openalex.org/I4210125507"]}],"countries":["MA"],"is_corresponding":false,"raw_author_name":"Mariya Ouaissa","raw_affiliation_strings":["LISI, Cadi Ayyad University, Marrakech, Morocco","LTI, Chouaib Doukkali University, El Jadida, Morocco"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"LISI, Cadi Ayyad University, Marrakech, Morocco","institution_ids":["https://openalex.org/I119856527"]},{"raw_affiliation_string":"LTI, Chouaib Doukkali University, El Jadida, Morocco","institution_ids":["https://openalex.org/I4210125507"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5080026839","display_name":"Mariyam Ouaissa","orcid":"https://orcid.org/0000-0002-3993-8405"},"institutions":[{"id":"https://openalex.org/I119856527","display_name":"Cadi Ayyad University","ror":"https://ror.org/04xf6nm78","country_code":"MA","type":"education","lineage":["https://openalex.org/I119856527"]},{"id":"https://openalex.org/I4210125507","display_name":"Chouaib Doukkali University","ror":"https://ror.org/036kgyt43","country_code":"MA","type":"education","lineage":["https://openalex.org/I4210125507"]}],"countries":["MA"],"is_corresponding":true,"raw_author_name":"Mariyam Ouaissa","raw_affiliation_strings":["LISI, Cadi Ayyad University, Marrakech, Morocco","LTI, Chouaib Doukkali University, El Jadida, Morocco"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"LISI, Cadi Ayyad University, Marrakech, Morocco","institution_ids":["https://openalex.org/I119856527"]},{"raw_affiliation_string":"LTI, Chouaib Doukkali University, El Jadida, Morocco","institution_ids":["https://openalex.org/I4210125507"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5080026839","display_name":"Mariyam Ouaissa","orcid":"https://orcid.org/0000-0002-3993-8405"},"institutions":[{"id":"https://openalex.org/I119856527","display_name":"Cadi Ayyad University","ror":"https://ror.org/04xf6nm78","country_code":"MA","type":"education","lineage":["https://openalex.org/I119856527"]},{"id":"https://openalex.org/I4210125507","display_name":"Chouaib Doukkali University","ror":"https://ror.org/036kgyt43","country_code":"MA","type":"education","lineage":["https://openalex.org/I4210125507"]},{"id":"https://openalex.org/I81605866","display_name":"Sidi Mohamed Ben Abdellah University","ror":"https://ror.org/04efg9a07","country_code":"MA","type":"education","lineage":["https://openalex.org/I81605866"]}],"countries":["MA"],"is_corresponding":false,"raw_author_name":"Mariyam Ouaissa","raw_affiliation_strings":["LISI, Cadi Ayyad University, Marrakech, Morocco","LTI, Chouaib Doukkali University, El Jadida, Morocco","Sidi Mohamed Ben Abdellah University, Fez, Morocco"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"LISI, Cadi Ayyad University, Marrakech, Morocco","institution_ids":["https://openalex.org/I119856527"]},{"raw_affiliation_string":"LTI, Chouaib Doukkali University, El Jadida, Morocco","institution_ids":["https://openalex.org/I4210125507"]},{"raw_affiliation_string":"Sidi Mohamed Ben Abdellah University, Fez, Morocco","institution_ids":["https://openalex.org/I81605866"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5114540331","display_name":"Zineb Nadifi","orcid":null},"institutions":[{"id":"https://openalex.org/I4210125507","display_name":"Chouaib Doukkali University","ror":"https://ror.org/036kgyt43","country_code":"MA","type":"education","lineage":["https://openalex.org/I4210125507"]}],"countries":["MA"],"is_corresponding":false,"raw_author_name":"Zineb Nadifi","raw_affiliation_strings":["LTI, Chouaib Doukkali University, El Jadida, Morocco","Laboratory of Geosciences and Environment Technics, Faculty of Science, El Jadida, Morocco"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"LTI, Chouaib Doukkali University, El Jadida, Morocco","institution_ids":["https://openalex.org/I4210125507"]},{"raw_affiliation_string":"Laboratory of Geosciences and Environment Technics, Faculty of Science, El Jadida, Morocco","institution_ids":["https://openalex.org/I4210125507"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5039997027","display_name":"Sarah El Himer","orcid":"https://orcid.org/0000-0002-3803-1211"},"institutions":[{"id":"https://openalex.org/I4210125507","display_name":"Chouaib Doukkali University","ror":"https://ror.org/036kgyt43","country_code":"MA","type":"education","lineage":["https://openalex.org/I4210125507"]},{"id":"https://openalex.org/I81605866","display_name":"Sidi Mohamed Ben Abdellah University","ror":"https://ror.org/04efg9a07","country_code":"MA","type":"education","lineage":["https://openalex.org/I81605866"]}],"countries":["MA"],"is_corresponding":false,"raw_author_name":"Sarah El Himer","raw_affiliation_strings":["Sidi Mohamed Ben Abdellah University, Fez, Morocco","LTI, Chouaib Doukkali University, El Jadida, Morocco"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Sidi Mohamed Ben Abdellah University, Fez, Morocco","institution_ids":["https://openalex.org/I81605866"]},{"raw_affiliation_string":"LTI, Chouaib Doukkali University, El Jadida, Morocco","institution_ids":["https://openalex.org/I4210125507"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5119020010","display_name":"Yassine Al Masmoudi","orcid":null},"institutions":[{"id":"https://openalex.org/I4210125507","display_name":"Chouaib Doukkali University","ror":"https://ror.org/036kgyt43","country_code":"MA","type":"education","lineage":["https://openalex.org/I4210125507"]}],"countries":["MA"],"is_corresponding":false,"raw_author_name":"Yassine Al Masmoudi","raw_affiliation_strings":["Laboratory of Geosciences and Environment Technics, Faculty of Science, El Jadida, Morocco"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Laboratory of Geosciences and Environment Technics, Faculty of Science, El Jadida, Morocco","institution_ids":["https://openalex.org/I4210125507"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5030456862","display_name":"Ali Kartit","orcid":"https://orcid.org/0000-0002-3472-1151"},"institutions":[{"id":"https://openalex.org/I4210125507","display_name":"Chouaib Doukkali University","ror":"https://ror.org/036kgyt43","country_code":"MA","type":"education","lineage":["https://openalex.org/I4210125507"]}],"countries":["MA"],"is_corresponding":false,"raw_author_name":"Ali Kartit","raw_affiliation_strings":["LTI, Chouaib Doukkali University, El Jadida, Morocco"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"LTI, Chouaib Doukkali University, El Jadida, Morocco","institution_ids":["https://openalex.org/I4210125507"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":["https://openalex.org/A5057261701","https://openalex.org/A5080026839"],"corresponding_institution_ids":["https://openalex.org/I119856527","https://openalex.org/I4210125507"],"apc_list":{"value":1285,"currency":"USD","value_usd":1285},"apc_paid":{"value":1285,"currency":"USD","value_usd":1285},"fwci":10.936,"has_fulltext":true,"cited_by_count":6,"citation_normalized_percentile":{"value":0.98067108,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":91,"max":99},"biblio":{"volume":"7","issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9886000156402588,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9886000156402588,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11479","display_name":"Smart Cities and Technologies","score":0.9796000123023987,"subfield":{"id":"https://openalex.org/subfields/2214","display_name":"Media Technology"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9713000059127808,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5142619013786316},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.4659512937068939},{"id":"https://openalex.org/keywords/risk-analysis","display_name":"Risk analysis (engineering)","score":0.4227222204208374},{"id":"https://openalex.org/keywords/cyber-threats","display_name":"Cyber threats","score":0.42085132002830505},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.32835739850997925}],"concepts":[{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5142619013786316},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.4659512937068939},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.4227222204208374},{"id":"https://openalex.org/C3018725008","wikidata":"https://www.wikidata.org/wiki/Q4071928","display_name":"Cyber threats","level":2,"score":0.42085132002830505},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.32835739850997925}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.3389/fcomp.2025.1647179","is_oa":true,"landing_page_url":"https://doi.org/10.3389/fcomp.2025.1647179","pdf_url":"https://www.frontiersin.org/journals/computer-science/articles/10.3389/fcomp.2025.1647179/pdf","source":{"id":"https://openalex.org/S4210211086","display_name":"Frontiers in Computer Science","issn_l":"2624-9898","issn":["2624-9898"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310320527","host_organization_name":"Frontiers Media","host_organization_lineage":["https://openalex.org/P4310320527"],"host_organization_lineage_names":["Frontiers Media"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Frontiers in Computer Science","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:539d654b8a8947f485d1fe1d952479a4","is_oa":true,"landing_page_url":"https://doaj.org/article/539d654b8a8947f485d1fe1d952479a4","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Frontiers in Computer Science, Vol 7 (2025)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.3389/fcomp.2025.1647179","is_oa":true,"landing_page_url":"https://doi.org/10.3389/fcomp.2025.1647179","pdf_url":"https://www.frontiersin.org/journals/computer-science/articles/10.3389/fcomp.2025.1647179/pdf","source":{"id":"https://openalex.org/S4210211086","display_name":"Frontiers in Computer Science","issn_l":"2624-9898","issn":["2624-9898"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310320527","host_organization_name":"Frontiers Media","host_organization_lineage":["https://openalex.org/P4310320527"],"host_organization_lineage_names":["Frontiers Media"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Frontiers in Computer Science","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4412546521.pdf","grobid_xml":"https://content.openalex.org/works/W4412546521.grobid-xml"},"referenced_works_count":27,"referenced_works":["https://openalex.org/W2921968294","https://openalex.org/W2952957939","https://openalex.org/W3001824711","https://openalex.org/W3003159890","https://openalex.org/W3018468351","https://openalex.org/W3041362921","https://openalex.org/W4280523185","https://openalex.org/W4285170326","https://openalex.org/W4324319747","https://openalex.org/W4362603371","https://openalex.org/W4362667743","https://openalex.org/W4372311864","https://openalex.org/W4389245434","https://openalex.org/W4389891125","https://openalex.org/W4390480650","https://openalex.org/W4390708786","https://openalex.org/W4391572413","https://openalex.org/W4400285325","https://openalex.org/W4400381821","https://openalex.org/W4400858333","https://openalex.org/W4401426188","https://openalex.org/W4402167520","https://openalex.org/W4403297870","https://openalex.org/W4405744125","https://openalex.org/W4406379785","https://openalex.org/W4406862894","https://openalex.org/W6776597980"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W3110311961","https://openalex.org/W4396897946","https://openalex.org/W3040950835","https://openalex.org/W4386107585","https://openalex.org/W2552246019","https://openalex.org/W2508779374","https://openalex.org/W4285815382","https://openalex.org/W4385452110","https://openalex.org/W4399917864"],"abstract_inverted_index":{"Introduction":[0],"With":[1],"the":[2,7,10,30,73,102,113,140,148,175,214,235,243,249,256,293],"rise":[3],"of":[4,9,19,32,132,136,192,211,245,258,296],"digital":[5],"transformation,":[6],"concept":[8],"smart":[11,25,66,82,203,297],"city":[12,67,83,204,298],"has":[13],"emerged":[14],"as":[15,24,88,221],"a":[16,56,80,170,182,189,238,259,266],"key":[17],"pillar":[18],"modern":[20],"urban":[21],"development.":[22],"However,":[23],"cities":[26],"increasingly":[27],"rely":[28],"on":[29,224,268],"Internet":[31,244],"Things":[33],"(IoT),":[34],"cloud":[35,228],"computing,":[36],"and":[37,48,60,76,91,104,134,142,162,181,194,209,230,287],"real-time":[38],"data":[39,77],"processing,":[40],"they":[41],"also":[42,153],"face":[43],"an":[44],"expanded":[45],"attack":[46],"surface":[47],"growing":[49],"cybersecurity":[50],"threats.":[51],"Methods":[52],"This":[53],"paper":[54,236],"presents":[55],"comprehensive":[57],"threat":[58,166],"modeling":[59],"risk":[61,172,186],"assessment":[62,173],"approach":[63],"tailored":[64],"to":[65,100,121,155,159,254],"environments.":[68],"It":[69],"begins":[70],"by":[71,112,184,282],"identifying":[72,269],"core":[74],"components":[75],"flows":[78],"within":[79],"typical":[81],"architecture":[84],"covering":[85],"domains":[86],"such":[87],"surveillance,":[89],"transportation,":[90],"healthcare.":[92],"A":[93],"Data":[94],"Flow":[95],"Diagram":[96],"(DFD)":[97],"is":[98,119,152,167],"constructed":[99],"visualize":[101],"interactions":[103],"pinpoint":[105],"critical":[106,222,273],"assets.":[107],"The":[108,197,279],"STRIDE":[109],"methodology,":[110],"supported":[111],"Microsoft":[114],"Threat":[115],"Modeling":[116],"(MTM)":[117],"tool,":[118],"employed":[120],"systematically":[122],"uncover":[123],"threats":[124,158,201,218],"including":[125],"spoofing,":[126,207],"tampering,":[127,208],"repudiation,":[128],"information":[129],"disclosure,":[130],"denial":[131,210],"service,":[133],"elevation":[135],"privilege.":[137],"To":[138],"enrich":[139],"analysis":[141,198],"align":[143],"with":[144,206,265],"real-world":[145],"adversarial":[146],"behavior,":[147],"MITRE":[149],"ATT&CK":[150,274],"framework":[151],"utilized":[154],"map":[156],"identified":[157],"known":[160],"tactics":[161],"techniques.":[163],"Each":[164],"discovered":[165],"evaluated":[168],"through":[169],"detailed":[171],"using":[174],"Common":[176],"Vulnerability":[177],"Scoring":[178],"System":[179],"(CVSS)":[180],"5":[183,185],"matrix,":[187],"allowing":[188],"quantifiable":[190],"estimation":[191],"impact":[193],"likelihood.":[195],"Results":[196],"revealed":[199],"21":[200],"across":[202],"domains,":[205],"service":[212],"being":[213],"most":[215],"frequent.":[216],"Five":[217],"were":[219],"rated":[220],"based":[223],"CVSS,":[225],"particularly":[226],"targeting":[227,261],"services":[229],"web":[231],"applications.":[232],"Discussion":[233],"Furthermore,":[234],"introduces":[237],"dedicated":[239],"case":[240],"study":[241,280],"involving":[242],"Vehicles":[246],"(IoV),":[247],"applying":[248],"Cyber":[250],"Kill":[251],"Chain":[252],"model":[253],"demonstrate":[255],"progression":[257],"cyber-attack":[260],"connected":[262],"vehicle":[263],"systems,":[264],"focus":[267],"less":[270],"common":[271],"yet":[272],"techniques":[275],"at":[276,291],"each":[277],"phase.":[278],"concludes":[281],"proposing":[283],"targeted":[284],"mitigation":[285],"strategies":[286],"architectural":[288],"recommendations":[289],"aimed":[290],"enhancing":[292],"cyber":[294],"resilience":[295],"infrastructures.":[299]},"counts_by_year":[{"year":2026,"cited_by_count":5},{"year":2025,"cited_by_count":1}],"updated_date":"2026-08-12T07:12:00.856984","created_date":"2025-10-10T00:00:00"}